Apple

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-0050 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 Mar 18, 2008 N/A· v4 N/A· v3 5.0 MEDIUM· v2 CFNetwork in Apple Mac OS X 10.4.11 allows remote HTTPS proxy servers to spoof secure websites via data in a 502 Bad Gateway error.
CVE-2008-0049 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 Mar 18, 2008 N/A· v4 N/A· v3 1.9 LOW· v2 AppKit in Apple Mac OS X 10.4.11 inadvertently makes an NSApplication mach port available for inter-process communication instead of inter-thread communication, which allows local users to execute arbitrary code via craf...Show more AppKit in Apple Mac OS X 10.4.11 inadvertently makes an NSApplication mach port available for inter-process communication instead of inter-thread communication, which allows local users to execute arbitrary code via crafted messages to privileged applications.Show less
CVE-2008-0048 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 Mar 18, 2008 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Stack-based buffer overflow in AppKit in Apple Mac OS X 10.4.11 allows context-dependent attackers to execute arbitrary code via the a long file name to the NSDocument API.
CVE-2008-0046 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 Mar 18, 2008 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The Application Firewall in Apple Mac OS X 10.5.2 has an incorrect German translation for the "Set access for specific services and applications" radio button that might cause the user to believe that the button is used...Show more The Application Firewall in Apple Mac OS X 10.5.2 has an incorrect German translation for the "Set access for specific services and applications" radio button that might cause the user to believe that the button is used to restrict access only to specific services and applications, which might allow attackers to bypass intended access restrictions.Show less
CVE-2008-0045 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 Mar 18, 2008 N/A· v4 N/A· v3 7.1 HIGH· v2 Unspecified vulnerability in AFP Server in Apple Mac OS X 10.4.11 allows remote attackers to bypass cross-realm authentication via unknown manipulations of Kerberos principal realm names.
CVE-2008-0044 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 Mar 18, 2008 N/A· v4 N/A· v3 5.8 MEDIUM· v2 Multiple buffer overflows in AFP Client in Apple Mac OS X 10.4.11 and 10.5.2 allow remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted afp:// URL.
CVE-2008-0888 4Apple CanonicalDebian+1 more 4Debian Linux Mac Os XUbuntu Linux+1 more May 1, 2025 Mar 17, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 The NEEDBITS macro in the inflate_dynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via u...Show more The NEEDBITS macro in the inflate_dynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data.Show less
CVE-2008-0894 1Apple 1Safari Apr 23, 2026 Feb 21, 2008 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Apple Safari might allow remote attackers to obtain potentially sensitive memory contents or cause a denial of service (crash) via a crafted (1) bitmap (BMP) or (2) GIF file, a related issue to CVE-2008-0420.
CVE-2008-0830 1Apple 1Iphoto Apr 23, 2026 Feb 19, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 The Digital Photo Access Protocol (DPAP) server for iPhoto 4.0.3 allows remote attackers to cause a denial of service (crash) via a malformed dpap: URI, a different vulnerability than CVE-2008-0043.
CVE-2008-0778 1Apple 1Quicktime Apr 23, 2026 Feb 14, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple stack-based buffer overflows in an ActiveX control in QTPlugin.ocx for Apple QuickTime 7.4.1 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long a...Show more Multiple stack-based buffer overflows in an ActiveX control in QTPlugin.ocx for Apple QuickTime 7.4.1 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long arguments to the (1) SetBgColor, (2) SetHREF, (3) SetMovieName, (4) SetTarget, and (5) SetMatrix methods.Show less
CVE-2008-0729 1Apple 1Mobile Safari Apr 23, 2026 Feb 12, 2008 N/A· v4 N/A· v3 7.1 HIGH· v2 Mobile Safari on Apple iPhone 1.1.2 and 1.1.3 allows remote attackers to cause a denial of service (memory exhaustion and device crash) via certain JavaScript code that constructs a long string and an array containing lo...Show more Mobile Safari on Apple iPhone 1.1.2 and 1.1.3 allows remote attackers to cause a denial of service (memory exhaustion and device crash) via certain JavaScript code that constructs a long string and an array containing long string elements, possibly a related issue to CVE-2006-3677. NOTE: some of these details are obtained from third party information.Show less
CVE-2008-0042 1Apple 1Mac Os X Apr 23, 2026 Feb 12, 2008 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Argument injection vulnerability in Terminal.app in Terminal in Apple Mac OS X 10.4.11 and 10.5 through 10.5.1 allows remote attackers to execute arbitrary code via unspecified URL schemes.
CVE-2008-0041 1Apple 1Mac Os X Apr 23, 2026 Feb 12, 2008 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Parental Controls in Apple Mac OS X 10.5 through 10.5.1 contacts www.apple.com "when a website is unblocked," which allows remote attackers to determine when a system is running Parental Controls.
CVE-2008-0040 1Apple 1Mac Os X Apr 23, 2026 Feb 12, 2008 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in NFS in Apple Mac OS X 10.5 through 10.5.1 allows remote attackers to cause a denial of service (system shutdown) or execute arbitrary code via unknown vectors related to mbuf chains that trig...Show more Unspecified vulnerability in NFS in Apple Mac OS X 10.5 through 10.5.1 allows remote attackers to cause a denial of service (system shutdown) or execute arbitrary code via unknown vectors related to mbuf chains that trigger memory corruption.Show less
CVE-2008-0039 1Apple 1Mail Apr 23, 2026 Feb 12, 2008 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Unspecified vulnerability in Mail in Apple Mac OS X 10.4.11 allows remote attackers to execute arbitrary commands via a crafted file:// URL.
CVE-2008-0038 1Apple 1Mac Os X Apr 23, 2026 Feb 12, 2008 N/A· v4 N/A· v3 1.9 LOW· v2 Launch Services in Apple Mac OS X 10.5 through 10.5.1 allows an uninstalled application to be launched if it is in a Time Machine backup, which might allow local users to bypass intended security restrictions or exploit...Show more Launch Services in Apple Mac OS X 10.5 through 10.5.1 allows an uninstalled application to be launched if it is in a Time Machine backup, which might allow local users to bypass intended security restrictions or exploit vulnerabilities in the application.Show less
CVE-2008-0037 1Apple 1Mac Os X Apr 23, 2026 Feb 12, 2008 N/A· v4 N/A· v3 4.3 MEDIUM· v2 X11 in Apple Mac OS X 10.5 through 10.5.1 does not properly handle when the "Allow connections from network client" preference is disabled, which allows remote attackers to bypass intended access restrictions and connect...Show more X11 in Apple Mac OS X 10.5 through 10.5.1 does not properly handle when the "Allow connections from network client" preference is disabled, which allows remote attackers to bypass intended access restrictions and connect to the X server.Show less
CVE-2008-0043 1Apple 1Iphoto Apr 23, 2026 Feb 8, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 Format string vulnerability in Apple iPhoto before 7.1.2 allows remote attackers to execute arbitrary code via photocast subscriptions.
CVE-2007-6427 7Apple CanonicalDebian+4 more 11Debian Linux FedoraLinux+8 more Apr 23, 2026 Jan 18, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerabili...Show more The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990.Show less
CVE-2008-0298 1Apple 1Safari Apr 23, 2026 Jan 16, 2008 N/A· v4 N/A· v3 4.3 MEDIUM· v2 KHTML WebKit as used in Apple Safari 2.x allows remote attackers to cause a denial of service (browser crash) via a crafted web page, possibly involving a STYLE attribute of a DIV element.

Previous 1...400401402...435 Next